For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tom_jhuapl_2790's avatar
tom_jhuapl_2790
Icon for Nimbostratus rankNimbostratus
Jul 14, 2016

Remote OCSP and CRLDP server SSL cert checking

How do you establish an LTM virtual server with 2-way SSL and remote revocation checking on the server side of a virtual server? What is the LTM approach and the setup steps for server SSL cert check...
BIG-IP
LTM
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jul 16, 2016

the server side is somewhat different, you are not receiving a client certificate but sending one (optionally) and receiving a server one.

 

specially with bigip with you probably own the server then CA check and perhaps CN is enough.

 

i did have a look at the client side ocsp and crldp stuff and if you go the irule route it seems possible to use the same commands but then in the server side events. sounds like a nice thing to try out.